`dup` copies the tainted state, but this mustn't